Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File:                     jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier:          q7WDORSq7yj/SlKN1GOGV78oJuQANMIQ2T3kHfK0Mcw=
Subject key identifier:   1E:F6:63:ED:AB:E5:29:A5:D4:8A:6C:33:E9:9E:03:66:B7:C2:EF:1F
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer:       /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial:       0196526DCA9E81A53F8E7034C993EAACDA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number:          0613
Signing time:             Sun 20 Apr 2025 09:00:49 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:49 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:49 +0000
Files and hashes:         1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
                          2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: QNTqtCFi9cFFEYX18JMUrm4GEyXAcwhlXwzhDLLTEWA=)
                          3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:ca:9e:81:a5:3f:8e:70:34:c9:93:ea:ac:da:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
        Validity
            Not Before: Apr 20 09:00:49 2025 GMT
            Not After : Apr 21 09:00:49 2025 GMT
        Subject: CN=1ef663edabe529a5d48a6c33e99e0366b7c2ef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:60:19:14:75:37:af:8e:b4:7c:60:02:43:
                    04:7c:7c:26:80:3d:d1:62:f7:36:21:f1:00:02:34:
                    f1:fd:dc:39:17:91:a0:4f:ab:b6:5c:93:98:0e:d1:
                    ac:7c:b8:d9:98:4a:42:b7:4f:a2:e4:8b:77:d1:12:
                    04:f3:56:91:cf:6d:72:94:03:df:11:5c:77:3c:28:
                    a9:24:fd:ac:83:a5:73:69:2d:d9:ab:a4:1f:9c:f3:
                    2f:5d:61:c8:11:ea:61:92:0e:ca:f5:20:c1:62:af:
                    00:a3:be:70:73:ee:12:88:e4:44:22:4e:c4:ac:97:
                    53:00:58:d7:f3:10:d8:d2:02:ba:cc:55:48:e4:e9:
                    23:99:00:a1:3c:6c:72:5c:e5:d6:b2:06:33:ee:37:
                    e2:fa:dc:6c:63:5c:ae:e5:9b:f4:0f:31:66:ee:7e:
                    6a:0a:78:a5:cb:9e:fd:a0:11:51:5c:55:a6:6f:a5:
                    02:9c:7a:de:9a:cf:3c:87:ca:8d:18:9e:6e:7d:21:
                    d9:66:4e:b4:8a:27:93:19:ad:1e:7f:b8:6d:43:df:
                    ee:31:a9:f4:ec:2e:1e:3e:2e:06:98:0a:42:73:19:
                    b1:14:cc:e8:4e:ad:3e:df:1b:5c:60:ae:ec:90:d1:
                    08:8a:65:26:ad:94:dc:3e:1c:a2:cd:1e:d4:72:ba:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:63:ED:AB:E5:29:A5:D4:8A:6C:33:E9:9E:03:66:B7:C2:EF:1F
            X509v3 Authority Key Identifier:
                keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:a7:65:d8:71:cb:c4:a1:0b:5d:65:ad:5c:83:90:0b:ae:
         80:6f:6d:90:e8:7c:1b:1b:63:f8:64:73:ad:43:ee:8e:f3:ab:
         42:2f:e5:8e:64:76:9f:41:fb:ea:6a:4d:13:c2:ec:06:cf:f0:
         3d:8f:1b:87:72:59:16:f3:88:ea:f7:08:13:f1:f3:88:7a:7b:
         f1:81:08:d6:30:c5:1b:2a:c4:19:f7:e0:72:29:41:a1:54:69:
         b0:82:7f:5f:fa:2f:2e:ce:e1:fe:83:cc:c3:70:2a:cc:1f:3b:
         1a:a2:a5:23:05:96:0a:ca:ef:67:6f:a1:43:d0:5e:df:1b:0b:
         12:76:cb:32:d0:30:69:af:03:a8:7b:0f:9a:87:ed:7e:60:59:
         f9:c0:73:96:04:f1:47:cf:a2:c8:e8:ff:73:2c:56:1c:59:c8:
         30:e7:5d:b7:24:e7:2c:98:66:0c:18:85:88:23:a1:c2:35:c1:
         d2:39:3f:fd:da:d3:07:29:d3:05:a1:64:3b:3b:50:72:7e:1d:
         bd:0e:60:33:c7:f5:8b:d9:5f:70:e6:e2:79:63:4f:5d:7a:e3:
         ac:93:ee:3b:8c:f1:d6:fb:82:78:11:4f:ea:e3:a4:b8:57:a3:
         d7:16:98:98:70:eb:69:2f:a2:f4:86:00:cc:ff:10:57:85:0b:
         45:14:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:10 2025 by rpki-client